CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Samsung Android Kernel Pointer Disclosure ASLR Bypass Vulnerability (CVE-2023-21492) Technical Analysis and Remediation Guide
[Affected Scope] Samsung Android mobile devices running firmware versions prior to the SMR May-2023 Release 1 security update
[Impact] A privileged local attacker can read exposed kernel pointers in system log files to bypass ASLR (Address Space Layout Randomization), facilitating subsequent kernel-level code execution
[Mitigation] Apply the Samsung May 2023 security update (SMR May-2023 Release 1) or later, and restrict access to sensitive system logs
Samsung Android sec_log Kernel Information Disclosure Vulnerability Analysis (CVE-2021-25369)
[Affected Scope] Samsung Android devices prior to SMR (Samsung Maintenance Release) March 2021 Release 1
[Impact] Local attackers can bypass critical kernel protections like KASLR by reading sensitive kernel memory addresses and structures from the improperly secured sec_log file
[Mitigation] Apply the official Samsung SMR March 2021 Release 1 (or later) firmware update immediately, or restrict access permissions to the debug log node